Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: 6co2cTT2rs2ImzwZmP0PJc4s8UPN4wuB/bjJPW5wo/c=
Subject key identifier: AB:8B:2B:05:33:9D:AF:D2:D3:F7:D2:33:C7:1D:C8:AE:D1:4A:3C:89
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 019CAAFD3B6CA29BED28A2C30CA6B186D7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: p12cORRV+wx7XT7qkLwxXWGGpxqd9j5LGViInW/tbPE=)
2: gyaoxZQ9pcA6k1D-cPBeZilXomE.roa (hash: EbmIg7/Lcotp9RQcNaPrOgD1blVN8hxve+ufr918Fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3b:6c:a2:9b:ed:28:a2:c3:0c:a6:b1:86:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=ab8b2b05339dafd2d3f7d233c71dc8aed14a3c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:47:47:64:c7:d0:3c:8d:aa:43:80:29:f9:
9a:09:11:2d:03:c5:83:f9:45:18:35:db:8a:0e:8c:
31:39:53:51:8e:1e:65:10:8d:37:3d:ae:94:5c:af:
a8:d0:6c:1d:04:c5:37:9e:e3:4c:c3:cc:59:36:82:
e4:cf:81:9d:00:df:6c:76:c8:f8:b8:37:47:37:49:
53:06:a6:32:67:db:fd:29:52:f0:7f:09:54:04:23:
b1:67:21:a0:23:ef:ab:29:cc:55:06:5b:dd:b5:97:
42:c4:57:81:d0:56:90:f3:b5:00:aa:34:36:9b:3e:
da:c2:ad:aa:9a:df:5e:c5:cc:dd:5f:10:c0:44:cd:
b6:da:35:f2:54:6d:6a:91:bf:6b:6a:e1:4a:fd:ee:
49:d7:66:80:a7:84:91:1d:8e:8b:d1:a2:9a:50:58:
62:ed:6e:38:50:cc:0d:f2:64:1f:9d:23:98:99:39:
82:6e:a0:86:33:c7:47:64:e0:b8:6e:d6:b1:d9:37:
e8:a8:e8:cc:d2:f4:41:d8:b0:1e:89:3b:81:06:2b:
69:dc:ab:73:1f:58:61:2a:e6:c4:50:6b:32:db:0a:
35:3d:db:b9:b2:d4:0f:8b:d1:6f:c1:ad:f9:2f:ba:
59:de:af:b9:a7:00:4e:e0:48:c1:e4:53:47:a4:33:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8B:2B:05:33:9D:AF:D2:D3:F7:D2:33:C7:1D:C8:AE:D1:4A:3C:89
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3e:65:b9:ce:f3:68:7a:54:b8:80:d7:2b:17:ff:65:e9:41:
6f:87:93:32:db:08:eb:9e:fd:f9:a2:42:0c:07:bb:fb:4a:96:
26:16:b2:24:f4:42:48:a8:fb:a8:8d:5c:cc:76:76:d4:00:50:
e4:8c:5b:73:5f:09:ac:27:27:14:8e:d3:52:9c:b8:45:8f:1a:
79:f8:21:e8:54:fa:fa:8e:0c:a9:a9:5b:e3:3b:08:5c:ab:25:
47:a6:a3:d5:a1:cf:06:ff:72:f2:ec:4d:f0:36:dd:d0:ea:e0:
b4:f4:37:ab:da:d6:7e:d8:6d:5b:12:41:74:f2:a7:fb:38:9a:
6f:c2:70:02:81:ad:75:25:93:2e:7c:54:6b:14:af:48:bf:82:
41:3d:05:97:c9:2a:94:4e:1b:90:ce:c7:b0:c9:9a:97:13:36:
0e:0a:04:f1:63:cc:31:75:76:c4:f8:81:01:ea:17:2e:cb:69:
20:76:8f:41:ae:8b:22:27:a3:2f:87:0d:7f:f2:97:81:0e:f3:
01:f1:f5:aa:c7:72:19:7f:14:5f:03:a8:bc:e1:91:d0:a5:29:
3a:19:0e:ce:1c:67:2a:bc:06:2e:c5:0f:c1:ee:eb:0e:6b:16:
ec:06:c3:79:3a:57:25:37:82:17:7d:b2:d0:e6:cc:3d:aa:15:
ea:c1:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:27 2026 by rpki-client